Precursory APIs

This page lists REST endpoints for as yet undocumented BIG-IQ APIs that F5 considers to be precursors of APIs still under development. These precursory APIs are not yet supported by F5, but may become official, public, supported BIG-IQ APIs in the future. No additional documentation about these APIs can be given at this time because they are likely to change. Their REST endpoints are listed here because a precursory API may be necessary to automate some important BIG-IQ workflows.

The current version of BIG-IQ also includes some private REST APIs, which F5 may remove from future versions of BIG-IQ. Any undocumented BIG-IQ APIs, which are not listed here, are private and should not be used.

Add, Remove, or List Devices

REST Endpoint Module Access Description
/mgmt/shared/resolver/device-groups/ Platform RO List of device groups
/mgmt/shared/resolver/device-groups/cm-bigip-allBigIpDevices/devices Platform RO List all devices
/mgmt/shared/resolver/device-groups/*/devices      
/mgmt/shared/resolver/device-groups/*/devices/*/rest-proxy/*      
/mgmt/global/tasks/device-discovery-import-controller Global RW Task for adding a new device
/mgmt/global/tasks/device-remove-mgmt-authority Global RW Task for removing a device

Management of BIG-IPs

REST Endpoint Module Access Description
/mgmt/cm/device/audit-logger Device RO Audit log for BIG-IQ Device module
/mgmt/cm/autodeploy/software-images Device RW BIG-IP ISO software image repository
/mgmt/cm/device/upgrades Device RW Task to perform a software upgrade of a BIG-IP device
Various backup and restore APIs Device RW Backup/restore APIs Note that scheduling writes directly to scheduler which won’t be exposed in future
/mgmt/cm/device/tasks/bulk-update-credentials Device RW Task to bulk update credentials on BIG-IP devices
Various licensing APIs Device RW Licensing
/mgmt/cm/device/user-scripts Device RW User script storage
/mgmt/cm/device/tasks/execute-user-script Device RW Task to execute a user script

Configuration of BIG-IPs

REST Endpoint Module Access Description
/mgmt/cm/<module>/audit-logger All config modules RO Audit logs
/mgmt/cm/<module>/tasks/deploy-configuration All config modules RW Task to deploy a module configuration
/mgmt/cm/<module>/tasks/snapshot-config All config modules RW Task to take a module snapshot
/mgmt/cm/<module>/tasks/restore-config All config modules RW Task to restore objects from snapshots to working-config

working-config (expanded list)

REST Endpoint Module Access Description
/mgmt/cm/<module>/working-config/* All config modules RW BIG-IQ’s editable config objects
/cm/access/tasks/working-config-copy
/cm/access/working-config/access-root-nodes
/cm/access/working-config/apm/aaa/active-directory-trusted-domains
/cm/access/working-config/apm/aaa/endpoint-management-system
/cm/access/working-config/apm/aaa/f5-mfa-configuration
/cm/access/working-config/apm/aaa/f5-service-connector
/cm/access/working-config/apm/aaa/localdb
/cm/access/working-config/apm/aaa/oam
/cm/access/working-config/apm/aaa/oam/*/accessgates
/cm/access/working-config/apm/aaa/oauth-provider
/cm/access/working-config/apm/aaa/oauth-request
/cm/access/working-config/apm/aaa/oauth-server
/cm/access/working-config/apm/aaa/ocsp
/cm/access/working-config/apm/aaa/ping-access-properties-file
/cm/access/working-config/apm/aaa/rsa-aa
/cm/access/working-config/apm/aaa/saml
/cm/access/working-config/apm/aaa/saml-idp-automation
/cm/access/working-config/apm/aaa/saml-idp-connector
/cm/access/working-config/apm/apm-avr-config
/cm/access/working-config/apm/application
/cm/access/working-config/apm/application-family
/cm/access/working-config/apm/application-filter
/cm/access/working-config/apm/client-packaging
/cm/access/working-config/apm/configuration/captcha
/cm/access/working-config/apm/log-setting
/cm/access/working-config/apm/ntlm/machine-account
/cm/access/working-config/apm/ntlm/ntlm-auth
/cm/access/working-config/apm/oauth/db-instance
/cm/access/working-config/apm/oauth/jwk-config
/cm/access/working-config/apm/oauth/jwt-config
/cm/access/working-config/apm/oauth/jwt-config/*/allowed-keys
/cm/access/working-config/apm/oauth/jwt-config/*/blocked-keys
/cm/access/working-config/apm/oauth/jwt-provider-list
/cm/access/working-config/apm/oauth/jwt-provider-list/*/providers
/cm/access/working-config/apm/oauth/oauth-claim
/cm/access/working-config/apm/oauth/oauth-client-app
/cm/access/working-config/apm/oauth/oauth-client-app/*/id-token-claims
/cm/access/working-config/apm/oauth/oauth-client-app/*/jwt-access-token-claims
/cm/access/working-config/apm/oauth/oauth-client-app/*/scopes
/cm/access/working-config/apm/oauth/oauth-client-app/*/userinfo-claims
/cm/access/working-config/apm/oauth/oauth-resource-server
/cm/access/working-config/apm/oauth/oauth-scope
/cm/access/working-config/apm/policy/access-policy/*/per-req-policy-properties
/cm/access/working-config/apm/policy/agent/aaa-active-directory
/cm/access/working-config/apm/policy/agent/aaa-client-cert
/cm/access/working-config/apm/policy/agent/aaa-crldp
/cm/access/working-config/apm/policy/agent/aaa-f5-mfa-device-registration
/cm/access/working-config/apm/policy/agent/aaa-f5-mfa-user-verification
/cm/access/working-config/apm/policy/agent/aaa-http
/cm/access/working-config/apm/policy/agent/aaa-identity
/cm/access/working-config/apm/policy/agent/aaa-ldap
/cm/access/working-config/apm/policy/agent/aaa-localdb
/cm/access/working-config/apm/policy/agent/aaa-madm
/cm/access/working-config/apm/policy/agent/aaa-managed-endpoint-notification
/cm/access/working-config/apm/policy/agent/aaa-managed-endpoint-query
/cm/access/working-config/apm/policy/agent/aaa-managed-endpoint-status
/cm/access/working-config/apm/policy/agent/aaa-oauth
/cm/access/working-config/apm/policy/agent/aaa-ocsp
/cm/access/working-config/apm/policy/agent/aaa-radius
/cm/access/working-config/apm/policy/agent/aaa-rsa-aa
/cm/access/working-config/apm/policy/agent/aaa-saml
/cm/access/working-config/apm/policy/agent/aaa-securid
/cm/access/working-config/apm/policy/agent/acct-radius
/cm/access/working-config/apm/policy/agent/acct-tacacsplus
/cm/access/working-config/apm/policy/agent/application-filter-lookup
/cm/access/working-config/apm/policy/agent/application-lookup
/cm/access/working-config/apm/policy/agent/category-lookup
/cm/access/working-config/apm/policy/agent/decision-box
/cm/access/working-config/apm/policy/agent/dynamic-acl
/cm/access/working-config/apm/policy/agent/email
/cm/access/working-config/apm/policy/agent/ending-allow
/cm/access/working-config/apm/policy/agent/ending-deny
/cm/access/working-config/apm/policy/agent/ending-redirect
/cm/access/working-config/apm/policy/agent/ending-reject
/cm/access/working-config/apm/policy/agent/endpoint-check-machine-cert
/cm/access/working-config/apm/policy/agent/endpoint-check-software
/cm/access/working-config/apm/policy/agent/endpoint-check-software/*/items
/cm/access/working-config/apm/policy/agent/endpoint-linux-check-file
/cm/access/working-config/apm/policy/agent/endpoint-linux-check-process
/cm/access/working-config/apm/policy/agent/endpoint-mac-check-file
/cm/access/working-config/apm/policy/agent/endpoint-mac-check-process
/cm/access/working-config/apm/policy/agent/endpoint-machine-info
/cm/access/working-config/apm/policy/agent/endpoint-windows-browser-cache-cleaner
/cm/access/working-config/apm/policy/agent/endpoint-windows-check-file
/cm/access/working-config/apm/policy/agent/endpoint-windows-check-process
/cm/access/working-config/apm/policy/agent/endpoint-windows-check-registry
/cm/access/working-config/apm/policy/agent/endpoint-windows-info-os
/cm/access/working-config/apm/policy/agent/endpoint-windows-protected-workspace
/cm/access/working-config/apm/policy/agent/external-logon-page
/cm/access/working-config/apm/policy/agent/http-header-modify
/cm/access/working-config/apm/policy/agent/irule-event
/cm/access/working-config/apm/policy/agent/kerberos
/cm/access/working-config/apm/policy/agent/localdb
/cm/access/working-config/apm/policy/agent/logging
/cm/access/working-config/apm/policy/agent/logon-page
/cm/access/working-config/apm/policy/agent/message-box
/cm/access/working-config/apm/policy/agent/oam
/cm/access/working-config/apm/policy/agent/oauth-authz
/cm/access/working-config/apm/policy/agent/otp-generate
/cm/access/working-config/apm/policy/agent/otp-verify
/cm/access/working-config/apm/policy/agent/protocol-lookup
/cm/access/working-config/apm/policy/agent/proxy-select
/cm/access/working-config/apm/policy/agent/resource-assign
/cm/access/working-config/apm/policy/agent/response-analytics
/cm/access/working-config/apm/policy/agent/route-domain-selection
/cm/access/working-config/apm/policy/agent/ssl-bypass-lookup
/cm/access/working-config/apm/policy/agent/ssl-bypass-set
/cm/access/working-config/apm/policy/agent/sso-configuration-select
/cm/access/working-config/apm/policy/agent/tacacsplus
/cm/access/working-config/apm/policy/agent/url-filter-lookup
/cm/access/working-config/apm/policy/agent/variable-assign
/cm/access/working-config/apm/policy/customization-group
/cm/access/working-config/apm/policy/customization-group/*/templates
/cm/access/working-config/apm/policy/customization-languages
/cm/access/working-config/apm/policy/image-file
/cm/access/working-config/apm/policy/policy-item
/cm/access/working-config/apm/profile/access/*/domain-groups
/cm/access/working-config/apm/profile/connectivity/*/client-policy
/cm/access/working-config/apm/profile/eca
/cm/access/working-config/apm/profile/exchange
/cm/access/working-config/apm/profile/oauth
/cm/access/working-config/apm/profile/oauth/*/client-apps
/cm/access/working-config/apm/profile/oauth/*/id-token-claims
/cm/access/working-config/apm/profile/oauth/*/jwt-access-token-claims
/cm/access/working-config/apm/profile/oauth/*/resource-servers
/cm/access/working-config/apm/profile/oauth/*/rotation-keys
/cm/access/working-config/apm/profile/oauth/*/userinfo-claims
/cm/access/working-config/apm/profile/oauthplugin
/cm/access/working-config/apm/profile/remote-desktop
/cm/access/working-config/apm/profile/vmware-view
/cm/access/working-config/apm/resource/app-tunnel
/cm/access/working-config/apm/resource/app-tunnel/*/apps
/cm/access/working-config/apm/resource/client-traffic-classifier/*/entries
/cm/access/working-config/apm/resource/portal-access
/cm/access/working-config/apm/resource/portal-access/*/items
/cm/access/working-config/apm/resource/remote-desktop/citrix
/cm/access/working-config/apm/resource/remote-desktop/citrix-client-bundle
/cm/access/working-config/apm/resource/remote-desktop/rdp
/cm/access/working-config/apm/resource/remote-desktop/vmware-view
/cm/access/working-config/apm/resource/sandbox
/cm/access/working-config/apm/resource/sandbox/*/files
/cm/access/working-config/apm/resource/webtop
/cm/access/working-config/apm/resource/webtop-link
/cm/access/working-config/apm/resource/webtop-section
/cm/access/working-config/apm/risk-class
/cm/access/working-config/apm/saml/attribute-consuming-service
/cm/access/working-config/apm/saml/attribute-consuming-service/*/attributes
/cm/access/working-config/apm/saml/auth-context-class-list
/cm/access/working-config/apm/sso/basic
/cm/access/working-config/apm/sso/form-based
/cm/access/working-config/apm/sso/form-basedv2
/cm/access/working-config/apm/sso/form-basedv2/*/forms
/cm/access/working-config/apm/sso/kerberos
/cm/access/working-config/apm/sso/ntlmv1
/cm/access/working-config/apm/sso/ntlmv2
/cm/access/working-config/apm/sso/oauth-bearer
/cm/access/working-config/apm/sso/saml
/cm/access/working-config/apm/sso/saml-resource
/cm/access/working-config/apm/sso/saml-sp-automation
/cm/access/working-config/apm/sso/saml-sp-automation/*/metadata-urls
/cm/access/working-config/apm/sso/saml-sp-connector
/cm/access/working-config/apm/swg-content-type
/cm/access/working-config/apm/swg-scheme
/cm/access/working-config/apm/url-filter
/cm/access/working-config/draft
/cm/access/working-config/file-objects
/cm/access/working-config/net/bwc/policy
/cm/access/working-config/net/bwc/priority-group
/cm/access/working-config/net/bwc/priority-group/*/priority-classes
/cm/access/working-config/snapshots
/cm/access/working-config/sys/url-db/download-schedule
/cm/access/working-config/sys/url-db/url-category
/cm/adc-core/tasks/working-config-copy
/cm/adc-core/working-config/file-objects
/cm/adc-core/working-config/ltm/cipher/group
/cm/adc-core/working-config/ltm/classification/ce
/cm/adc-core/working-config/ltm/data-group/internal
/cm/adc-core/working-config/ltm/eviction-policy
/cm/adc-core/working-config/ltm/global-settings/connection
/cm/adc-core/working-config/ltm/message-routing/diameter/profile/router
/cm/adc-core/working-config/ltm/message-routing/diameter/profile/session
/cm/adc-core/working-config/ltm/message-routing/sip/profile/router
/cm/adc-core/working-config/ltm/message-routing/sip/profile/session
/cm/adc-core/working-config/ltm/monitor/diameter
/cm/adc-core/working-config/ltm/monitor/dns
/cm/adc-core/working-config/ltm/monitor/external
/cm/adc-core/working-config/ltm/monitor/firepass
/cm/adc-core/working-config/ltm/monitor/ftp
/cm/adc-core/working-config/ltm/monitor/gateway-icmp
/cm/adc-core/working-config/ltm/monitor/http
/cm/adc-core/working-config/ltm/monitor/https
/cm/adc-core/working-config/ltm/monitor/icmp
/cm/adc-core/working-config/ltm/monitor/imap
/cm/adc-core/working-config/ltm/monitor/inband
/cm/adc-core/working-config/ltm/monitor/ldap
/cm/adc-core/working-config/ltm/monitor/module-score
/cm/adc-core/working-config/ltm/monitor/mqtt
/cm/adc-core/working-config/ltm/monitor/mssql
/cm/adc-core/working-config/ltm/monitor/mysql
/cm/adc-core/working-config/ltm/monitor/nntp
/cm/adc-core/working-config/ltm/monitor/none
/cm/adc-core/working-config/ltm/monitor/oracle
/cm/adc-core/working-config/ltm/monitor/pop3
/cm/adc-core/working-config/ltm/monitor/postgresql
/cm/adc-core/working-config/ltm/monitor/radius
/cm/adc-core/working-config/ltm/monitor/radius-accounting
/cm/adc-core/working-config/ltm/monitor/real-server
/cm/adc-core/working-config/ltm/monitor/rpc
/cm/adc-core/working-config/ltm/monitor/sasp
/cm/adc-core/working-config/ltm/monitor/scripted
/cm/adc-core/working-config/ltm/monitor/sip
/cm/adc-core/working-config/ltm/monitor/smb
/cm/adc-core/working-config/ltm/monitor/smtp
/cm/adc-core/working-config/ltm/monitor/snmp-dca
/cm/adc-core/working-config/ltm/monitor/snmp-dca-base
/cm/adc-core/working-config/ltm/monitor/soap
/cm/adc-core/working-config/ltm/monitor/tcp
/cm/adc-core/working-config/ltm/monitor/tcp-echo
/cm/adc-core/working-config/ltm/monitor/tcp-half-open
/cm/adc-core/working-config/ltm/monitor/udp
/cm/adc-core/working-config/ltm/monitor/virtual-location
/cm/adc-core/working-config/ltm/monitor/wap
/cm/adc-core/working-config/ltm/monitor/wmi
/cm/adc-core/working-config/ltm/node
/cm/adc-core/working-config/ltm/persistence/cookie
/cm/adc-core/working-config/ltm/persistence/dest-addr
/cm/adc-core/working-config/ltm/persistence/hash
/cm/adc-core/working-config/ltm/persistence/msrdp
/cm/adc-core/working-config/ltm/persistence/sip
/cm/adc-core/working-config/ltm/persistence/source-addr
/cm/adc-core/working-config/ltm/persistence/ssl
/cm/adc-core/working-config/ltm/persistence/universal
/cm/adc-core/working-config/ltm/pool
/cm/adc-core/working-config/ltm/pool/*/members
/cm/adc-core/working-config/ltm/profile/analytics-http
/cm/adc-core/working-config/ltm/profile/analytics-http/*/traffic-capture
/cm/adc-core/working-config/ltm/profile/certificate-authority
/cm/adc-core/working-config/ltm/profile/classification
/cm/adc-core/working-config/ltm/profile/client-ldap
/cm/adc-core/working-config/ltm/profile/client-ssl
/cm/adc-core/working-config/ltm/profile/dhcpv4
/cm/adc-core/working-config/ltm/profile/dhcpv6
/cm/adc-core/working-config/ltm/profile/diameter
/cm/adc-core/working-config/ltm/profile/dns
/cm/adc-core/working-config/ltm/profile/dns-logging
/cm/adc-core/working-config/ltm/profile/fasthttp
/cm/adc-core/working-config/ltm/profile/fastl4
/cm/adc-core/working-config/ltm/profile/fix
/cm/adc-core/working-config/ltm/profile/ftp
/cm/adc-core/working-config/ltm/profile/gtp
/cm/adc-core/working-config/ltm/profile/html
/cm/adc-core/working-config/ltm/profile/http
/cm/adc-core/working-config/ltm/profile/http2
/cm/adc-core/working-config/ltm/profile/http-compression
/cm/adc-core/working-config/ltm/profile/icap
/cm/adc-core/working-config/ltm/profile/ipother
/cm/adc-core/working-config/ltm/profile/mblb
/cm/adc-core/working-config/ltm/profile/ntlm
/cm/adc-core/working-config/ltm/profile/ocsp-stapling-params
/cm/adc-core/working-config/ltm/profile/one-connect
/cm/adc-core/working-config/ltm/profile/pcp
/cm/adc-core/working-config/ltm/profile/pptp
/cm/adc-core/working-config/ltm/profile/qoe
/cm/adc-core/working-config/ltm/profile/radius
/cm/adc-core/working-config/ltm/profile/request-adapt
/cm/adc-core/working-config/ltm/profile/request-log
/cm/adc-core/working-config/ltm/profile/response-adapt
/cm/adc-core/working-config/ltm/profile/rewrite/*/uri-rules
/cm/adc-core/working-config/ltm/profile/rtsp
/cm/adc-core/working-config/ltm/profile/sctp
/cm/adc-core/working-config/ltm/profile/server-ldap
/cm/adc-core/working-config/ltm/profile/sip
/cm/adc-core/working-config/ltm/profile/smtps
/cm/adc-core/working-config/ltm/profile/socks
/cm/adc-core/working-config/ltm/profile/statistics
/cm/adc-core/working-config/ltm/profile/stream
/cm/adc-core/working-config/ltm/profile/tcp
/cm/adc-core/working-config/ltm/profile/udp
/cm/adc-core/working-config/ltm/profile/web-acceleration
/cm/adc-core/working-config/ltm/profile/xml
/cm/adc-core/working-config/ltm/rule
/cm/adc-core/working-config/ltm/snat-translation
/cm/adc-core/working-config/ltm/virtual
/cm/adc-core/working-config/ltm/virtual/*/profiles
/cm/adc-core/working-config/net/dns-resolver
/cm/adc-core/working-config/net/interface
/cm/adc-core/working-config/net/ip-address-lists
/cm/adc-core/working-config/net/ipsec/ike-daemon
/cm/adc-core/working-config/net/ipsec/ike-peer
/cm/adc-core/working-config/net/ipsec/ipsec-policy
/cm/adc-core/working-config/net/ipsec/manual-security-association
/cm/adc-core/working-config/net/ipsec/traffic-selector
/cm/adc-core/working-config/net/rate-shaping/class
/cm/adc-core/working-config/net/route
/cm/adc-core/working-config/net/route-domain
/cm/adc-core/working-config/net/self
/cm/adc-core/working-config/net/traffic-group
/cm/adc-core/working-config/net/tunnels/fec
/cm/adc-core/working-config/net/tunnels/ipip
/cm/adc-core/working-config/net/tunnels/tunnel
/cm/adc-core/working-config/net/vlan
/cm/adc-core/working-config/net/vlan/*/interfaces
/cm/adc-core/working-config/net/vlan-group
/cm/adc-core/working-config/root-node
/cm/adc-core/working-config/snapshots
/cm/adc-core/working-config/sys/application-service
/cm/adc-core/working-config/sys/crypto/cert
/cm/adc-core/working-config/sys/crypto/key
/cm/adc-core/working-config/sys/file/ssl-cert
/cm/adc-core/working-config/sys/file/ssl-cert/*/bundle-certificates
/cm/adc-core/working-config/sys/file/ssl-crl
/cm/adc-core/working-config/sys/file/ssl-csr
/cm/adc-core/working-config/sys/file/ssl-key
/cm/adc-core/working-config/sys/folder
/cm/adc-core/working-config/sys/log-config/destination/alertd
/cm/adc-core/working-config/sys/log-config/destination/arcsight
/cm/adc-core/working-config/sys/log-config/destination/ipfix
/cm/adc-core/working-config/sys/log-config/destination/local-db
/cm/adc-core/working-config/sys/log-config/destination/local-syslog
/cm/adc-core/working-config/sys/log-config/destination/mgmt-port
/cm/adc-core/working-config/sys/log-config/destination/remote-hslog
/cm/adc-core/working-config/sys/log-config/destination/remote-syslog
/cm/adc-core/working-config/sys/log-config/destination/splunk
/cm/adc-core/working-config/sys/log-config/filter
/cm/adc-core/working-config/sys/log-config/publisher
/cm/adc-core/working-config/sys/smtp-server
/cm/asm/tasks/working-config-copy
/cm/asm/working-config/asm-root-nodes
/cm/asm/working-config/attack-types-defaults-loader
/cm/asm/working-config/data-protection
/cm/asm/working-config/defaults-by-violations-defaults-loader
/cm/asm/working-config/disallowed-filetype-default-helper
/cm/asm/working-config/http-methods
/cm/asm/working-config/http-methods-defaults-loader
/cm/asm/working-config/policies
/cm/asm/working-config/policies/*/brute-force-attack-preventions
/cm/asm/working-config/policies/*/character-sets
/cm/asm/working-config/policies/*/cookies
/cm/asm/working-config/policies/*/csrf-protection
/cm/asm/working-config/policies/*/csrf-urls
/cm/asm/working-config/policies/*/data-guard
/cm/asm/working-config/policies/*/disallowed-geolocations
/cm/asm/working-config/policies/*/evasions
/cm/asm/working-config/policies/*/extractions
/cm/asm/working-config/policies/*/filetypes
/cm/asm/working-config/policies/*/gwt-profiles
/cm/asm/working-config/policies/*/headers
/cm/asm/working-config/policies/*/host-names
/cm/asm/working-config/policies/*/http-protocols
/cm/asm/working-config/policies/*/ip-intelligence
/cm/asm/working-config/policies/*/json-profiles
/cm/asm/working-config/policies/*/login-enforcement
/cm/asm/working-config/policies/*/login-pages
/cm/asm/working-config/policies/*/methods
/cm/asm/working-config/policies/*/parameters
/cm/asm/working-config/policies/*/plain-text-profiles
/cm/asm/working-config/policies/*/policy-builder
/cm/asm/working-config/policies/*/redirection-protection
/cm/asm/working-config/policies/*/response-pages
/cm/asm/working-config/policies/*/sections
/cm/asm/working-config/policies/*/sensitive-parameters
/cm/asm/working-config/policies/*/server-technologies
/cm/asm/working-config/policies/*/session-tracking
/cm/asm/working-config/policies/*/signatures
/cm/asm/working-config/policies/*/signatures/update
/cm/asm/working-config/policies/*/signature-sets
/cm/asm/working-config/policies/*/suggestions
/cm/asm/working-config/policies/*/suggestions/bulk
/cm/asm/working-config/policies/*/urls
/cm/asm/working-config/policies/*/violations
/cm/asm/working-config/policies/*/web-scraping
/cm/asm/working-config/policies/*/web-services-securities
/cm/asm/working-config/policies/*/websocket-urls
/cm/asm/working-config/policies/*/whitelist-ips
/cm/asm/working-config/policies/*/xml-profiles
/cm/asm/working-config/policies/*/xml-validation-files
/cm/asm/working-config/policy-building/disallowed-filetypes
/cm/asm/working-config/refinements
/cm/asm/working-config/refinements-default-helper
/cm/asm/working-config/scraping-extensions
/cm/asm/working-config/server-technologies
/cm/asm/working-config/server-technologies-defaults-loader
/cm/asm/working-config/signatures
/cm/asm/working-config/signatures/delete
/cm/asm/working-config/signatures-defaults-loader
/cm/asm/working-config/signature-sets
/cm/asm/working-config/signature-sets-defaults-loader
/cm/asm/working-config/signature-sets-transform
/cm/asm/working-config/snapshots
/cm/asm/working-config/systems-defaults-loader
/cm/asm/working-config/violations
/cm/asm/working-config/virtual-servers
/cm/dns/tasks/working-config-copy
/cm/dns/working-config/global-settings/general
/cm/dns/working-config/listener
/cm/dns/working-config/profile
/cm/dns/working-config/root-node
/cm/dns/working-config/snapshots
/cm/firewall/tasks/working-config-copy
/cm/firewall/working-config/address-lists
/cm/firewall/working-config/change-notify-rules
/cm/firewall/working-config/destination-translations
/cm/firewall/working-config/device-contexts
/cm/firewall/working-config/firewalls
/cm/firewall/working-config/firewall-root-nodes
/cm/firewall/working-config/firewalls/*/rules
/cm/firewall/working-config/fqdn-resolvers
/cm/firewall/working-config/nat-policies
/cm/firewall/working-config/nat-policies/*/rules
/cm/firewall/working-config/policies
/cm/firewall/working-config/policies/*/rules
/cm/firewall/working-config/port-lists
/cm/firewall/working-config/port-misuse-policies
/cm/firewall/working-config/rule-lists
/cm/firewall/working-config/rule-lists/*/rules
/cm/firewall/working-config/schedules
/cm/firewall/working-config/service-policies
/cm/firewall/working-config/service-timer-policies
/cm/firewall/working-config/snapshots
/cm/firewall/working-config/source-translations
/cm/security-shared/tasks/working-config-copy
/cm/security-shared/working-config/anti-fraud-profiles
/cm/security-shared/working-config/blacklist-publisher/categories
/cm/security-shared/working-config/blacklist-publisher/profiles
/cm/security-shared/working-config/datasync
/cm/security-shared/working-config/dos-bot-signature
/cm/security-shared/working-config/dos-bot-signature-category
/cm/security-shared/working-config/dos-device-config
/cm/security-shared/working-config/dos-network-whitelist
/cm/security-shared/working-config/dos-profiles
/cm/security-shared/working-config/dos-profiles/*/application
/cm/security-shared/working-config/dos-profiles/*/dos-network
/cm/security-shared/working-config/dos-profiles/*/protocol-dns
/cm/security-shared/working-config/dos-profiles/*/protocol-sip
/cm/security-shared/working-config/ip-intelligence/blacklist-categories
/cm/security-shared/working-config/ip-intelligence/feed-lists
/cm/security-shared/working-config/ip-intelligence/global-policy
/cm/security-shared/working-config/ip-intelligence/policies
/cm/security-shared/working-config/ip-uncommon-protolists
/cm/security-shared/working-config/log-profiles
/cm/security-shared/working-config/log-profiles/*/application
/cm/security-shared/working-config/log-profiles/*/network
/cm/security-shared/working-config/log-profiles/*/protocol-dns
/cm/security-shared/working-config/log-profiles/*/protocol-sip
/cm/security-shared/working-config/route-domains
/cm/security-shared/working-config/scrubber-profiles
/cm/security-shared/working-config/scrubber-profiles/*/scrubber-categories
/cm/security-shared/working-config/scrubber-profiles/*/scrubber-rt-domains
/cm/security-shared/working-config/scrubber-profiles/*/scrubber-virtual-servers
/cm/security-shared/working-config/security-dns-profiles
/cm/security-shared/working-config/security-http-profiles
/cm/security-shared/working-config/shared-root-nodes
/cm/security-shared/working-config/snapshots
/cm/security-shared/working-config/ssh-profiles
/cm/security-shared/working-config/ssh-profiles/*/auth-info
/cm/security-shared/working-config/ssh-profiles/*/rules
/cm/security-shared/working-config/udp-portlists
/cm/security-shared/working-config/virtuals
/cm/security-shared/working-config/virtuals/*/profiles
/cm/websafe/tasks/working-config-copy
/cm/websafe/working-config/accounts
/cm/websafe/working-config/alert-rules
/cm/websafe/working-config/alert-types
/cm/websafe/working-config/alert-types-defaults-loader
/cm/websafe/working-config/datasafe-profiles
/cm/websafe/working-config/datasafe-profiles/*/urls
/cm/websafe/working-config/datasafe-profiles-default-helper
/cm/websafe/working-config/feeds
/cm/websafe/working-config/feeds-defaults-loader
/cm/websafe/working-config/forwarding-alert-rules
/cm/websafe/working-config/fps-root-nodes
/cm/websafe/working-config/snapshots
/cm/websafe/working-config/virtual-servers
/cm/websafe/working-config/virtual-servers/*/profiles
/cm/websafe/working-config/webservice-configs

current-config (expanded list)

REST Endpoint Module Access Description
/mgmt/cm/<module>/current-config/* All config modules RO BIG-IQ’s cached view of BIG-IP device configuration
/cm/access/current-config/apm/aaa/active-directory
/cm/access/current-config/apm/aaa/active-directory-trusted-domains
/cm/access/current-config/apm/aaa/crldp
/cm/access/current-config/apm/aaa/endpoint-management-system
/cm/access/current-config/apm/aaa/f5-mfa-configuration
/cm/access/current-config/apm/aaa/f5-service-connector
/cm/access/current-config/apm/aaa/http
/cm/access/current-config/apm/aaa/kerberos
/cm/access/current-config/apm/aaa/kerberos-keytab-file
/cm/access/current-config/apm/aaa/ldap
/cm/access/current-config/apm/aaa/localdb
/cm/access/current-config/apm/aaa/oam
/cm/access/current-config/apm/aaa/oam/*/accessgates
/cm/access/current-config/apm/aaa/oauth-provider
/cm/access/current-config/apm/aaa/oauth-request
/cm/access/current-config/apm/aaa/oauth-server
/cm/access/current-config/apm/aaa/ocsp
/cm/access/current-config/apm/aaa/ping-access-properties-file
/cm/access/current-config/apm/aaa/radius
/cm/access/current-config/apm/aaa/rsa-aa
/cm/access/current-config/apm/aaa/saml
/cm/access/current-config/apm/aaa/saml-idp-automation
/cm/access/current-config/apm/aaa/saml-idp-connector
/cm/access/current-config/apm/aaa/securid
/cm/access/current-config/apm/aaa/securid/*/config-files
/cm/access/current-config/apm/aaa/tacacsplus
/cm/access/current-config/apm/acl
/cm/access/current-config/apm/apm-avr-config
/cm/access/current-config/apm/application
/cm/access/current-config/apm/application-family
/cm/access/current-config/apm/application-filter
/cm/access/current-config/apm/client-packaging
/cm/access/current-config/apm/configuration/captcha
/cm/access/current-config/apm/log-setting
/cm/access/current-config/apm/ntlm/machine-account
/cm/access/current-config/apm/ntlm/ntlm-auth
/cm/access/current-config/apm/oauth/db-instance
/cm/access/current-config/apm/oauth/jwk-config
/cm/access/current-config/apm/oauth/jwt-config
/cm/access/current-config/apm/oauth/jwt-config/*/allowed-keys
/cm/access/current-config/apm/oauth/jwt-config/*/blocked-keys
/cm/access/current-config/apm/oauth/jwt-provider-list
/cm/access/current-config/apm/oauth/jwt-provider-list/*/providers
/cm/access/current-config/apm/oauth/oauth-claim
/cm/access/current-config/apm/oauth/oauth-client-app
/cm/access/current-config/apm/oauth/oauth-client-app/*/id-token-claims
/cm/access/current-config/apm/oauth/oauth-client-app/*/jwt-access-token-claims
/cm/access/current-config/apm/oauth/oauth-client-app/*/scopes
/cm/access/current-config/apm/oauth/oauth-client-app/*/userinfo-claims
/cm/access/current-config/apm/oauth/oauth-resource-server
/cm/access/current-config/apm/oauth/oauth-scope
/cm/access/current-config/apm/policy/access-policy
/cm/access/current-config/apm/policy/access-policy/*/per-req-policy-properties
/cm/access/current-config/apm/policy/agent/aaa-active-directory
/cm/access/current-config/apm/policy/agent/aaa-client-cert
/cm/access/current-config/apm/policy/agent/aaa-crldp
/cm/access/current-config/apm/policy/agent/aaa-f5-mfa-device-registration
/cm/access/current-config/apm/policy/agent/aaa-f5-mfa-user-verification
/cm/access/current-config/apm/policy/agent/aaa-http
/cm/access/current-config/apm/policy/agent/aaa-identity
/cm/access/current-config/apm/policy/agent/aaa-ldap
/cm/access/current-config/apm/policy/agent/aaa-localdb
/cm/access/current-config/apm/policy/agent/aaa-madm
/cm/access/current-config/apm/policy/agent/aaa-managed-endpoint-notification
/cm/access/current-config/apm/policy/agent/aaa-managed-endpoint-query
/cm/access/current-config/apm/policy/agent/aaa-managed-endpoint-status
/cm/access/current-config/apm/policy/agent/aaa-oauth
/cm/access/current-config/apm/policy/agent/aaa-ocsp
/cm/access/current-config/apm/policy/agent/aaa-radius
/cm/access/current-config/apm/policy/agent/aaa-rsa-aa
/cm/access/current-config/apm/policy/agent/aaa-saml
/cm/access/current-config/apm/policy/agent/aaa-securid
/cm/access/current-config/apm/policy/agent/acct-radius
/cm/access/current-config/apm/policy/agent/acct-tacacsplus
/cm/access/current-config/apm/policy/agent/application-filter-lookup
/cm/access/current-config/apm/policy/agent/application-lookup
/cm/access/current-config/apm/policy/agent/category-lookup
/cm/access/current-config/apm/policy/agent/decision-box
/cm/access/current-config/apm/policy/agent/dynamic-acl
/cm/access/current-config/apm/policy/agent/email
/cm/access/current-config/apm/policy/agent/ending-allow
/cm/access/current-config/apm/policy/agent/ending-deny
/cm/access/current-config/apm/policy/agent/ending-redirect
/cm/access/current-config/apm/policy/agent/ending-reject
/cm/access/current-config/apm/policy/agent/endpoint-check-machine-cert
/cm/access/current-config/apm/policy/agent/endpoint-check-software
/cm/access/current-config/apm/policy/agent/endpoint-check-software/*/items
/cm/access/current-config/apm/policy/agent/endpoint-linux-check-file
/cm/access/current-config/apm/policy/agent/endpoint-linux-check-process
/cm/access/current-config/apm/policy/agent/endpoint-mac-check-file
/cm/access/current-config/apm/policy/agent/endpoint-mac-check-process
/cm/access/current-config/apm/policy/agent/endpoint-machine-info
/cm/access/current-config/apm/policy/agent/endpoint-windows-browser-cache-cleaner
/cm/access/current-config/apm/policy/agent/endpoint-windows-check-file
/cm/access/current-config/apm/policy/agent/endpoint-windows-check-process
/cm/access/current-config/apm/policy/agent/endpoint-windows-check-registry
/cm/access/current-config/apm/policy/agent/endpoint-windows-info-os
/cm/access/current-config/apm/policy/agent/endpoint-windows-protected-workspace
/cm/access/current-config/apm/policy/agent/external-logon-page
/cm/access/current-config/apm/policy/agent/http-header-modify
/cm/access/current-config/apm/policy/agent/irule-event
/cm/access/current-config/apm/policy/agent/kerberos
/cm/access/current-config/apm/policy/agent/localdb
/cm/access/current-config/apm/policy/agent/logging
/cm/access/current-config/apm/policy/agent/logon-page
/cm/access/current-config/apm/policy/agent/message-box
/cm/access/current-config/apm/policy/agent/oam
/cm/access/current-config/apm/policy/agent/oauth-authz
/cm/access/current-config/apm/policy/agent/otp-generate
/cm/access/current-config/apm/policy/agent/otp-verify
/cm/access/current-config/apm/policy/agent/protocol-lookup
/cm/access/current-config/apm/policy/agent/proxy-select
/cm/access/current-config/apm/policy/agent/resource-assign
/cm/access/current-config/apm/policy/agent/response-analytics
/cm/access/current-config/apm/policy/agent/route-domain-selection
/cm/access/current-config/apm/policy/agent/ssl-bypass-lookup
/cm/access/current-config/apm/policy/agent/ssl-bypass-set
/cm/access/current-config/apm/policy/agent/sso-configuration-select
/cm/access/current-config/apm/policy/agent/tacacsplus
/cm/access/current-config/apm/policy/agent/url-filter-lookup
/cm/access/current-config/apm/policy/agent/variable-assign
/cm/access/current-config/apm/policy/customization-group
/cm/access/current-config/apm/policy/customization-group/*/templates
/cm/access/current-config/apm/policy/customization-languages
/cm/access/current-config/apm/policy/image-file
/cm/access/current-config/apm/policy/policy-item
/cm/access/current-config/apm/profile/access
/cm/access/current-config/apm/profile/access/*/domain-groups
/cm/access/current-config/apm/profile/connectivity
/cm/access/current-config/apm/profile/connectivity/*/client-policy
/cm/access/current-config/apm/profile/eca
/cm/access/current-config/apm/profile/exchange
/cm/access/current-config/apm/profile/oauth
/cm/access/current-config/apm/profile/oauth/*/client-apps
/cm/access/current-config/apm/profile/oauth/*/id-token-claims
/cm/access/current-config/apm/profile/oauth/*/jwt-access-token-claims
/cm/access/current-config/apm/profile/oauth/*/resource-servers
/cm/access/current-config/apm/profile/oauth/*/rotation-keys
/cm/access/current-config/apm/profile/oauth/*/userinfo-claims
/cm/access/current-config/apm/profile/oauthplugin
/cm/access/current-config/apm/profile/ping-access
/cm/access/current-config/apm/profile/remote-desktop
/cm/access/current-config/apm/profile/vdi
/cm/access/current-config/apm/profile/vmware-view
/cm/access/current-config/apm/resource/app-tunnel
/cm/access/current-config/apm/resource/app-tunnel/*/apps
/cm/access/current-config/apm/resource/client-rate-class
/cm/access/current-config/apm/resource/client-traffic-classifier
/cm/access/current-config/apm/resource/client-traffic-classifier/*/entries
/cm/access/current-config/apm/resource/ipv6-leasepool
/cm/access/current-config/apm/resource/leasepool
/cm/access/current-config/apm/resource/network-access
/cm/access/current-config/apm/resource/network-access/*/optimized-app
/cm/access/current-config/apm/resource/portal-access
/cm/access/current-config/apm/resource/portal-access/*/items
/cm/access/current-config/apm/resource/remote-desktop/citrix
/cm/access/current-config/apm/resource/remote-desktop/citrix-client-bundle
/cm/access/current-config/apm/resource/remote-desktop/rdp
/cm/access/current-config/apm/resource/remote-desktop/vmware-view
/cm/access/current-config/apm/resource/sandbox
/cm/access/current-config/apm/resource/sandbox/*/files
/cm/access/current-config/apm/resource/webtop
/cm/access/current-config/apm/resource/webtop-link
/cm/access/current-config/apm/resource/webtop-section
/cm/access/current-config/apm/risk-class
/cm/access/current-config/apm/saml/artifact-resolution-service
/cm/access/current-config/apm/saml/attribute-consuming-service
/cm/access/current-config/apm/saml/attribute-consuming-service/*/attributes
/cm/access/current-config/apm/saml/auth-context-class-list
/cm/access/current-config/apm/sso/basic
/cm/access/current-config/apm/sso/form-based
/cm/access/current-config/apm/sso/form-basedv2
/cm/access/current-config/apm/sso/form-basedv2/*/forms
/cm/access/current-config/apm/sso/kerberos
/cm/access/current-config/apm/sso/ntlmv1
/cm/access/current-config/apm/sso/ntlmv2
/cm/access/current-config/apm/sso/oauth-bearer
/cm/access/current-config/apm/sso/saml
/cm/access/current-config/apm/sso/saml-resource
/cm/access/current-config/apm/sso/saml-sp-automation
/cm/access/current-config/apm/sso/saml-sp-automation/*/metadata-urls
/cm/access/current-config/apm/sso/saml-sp-connector
/cm/access/current-config/apm/swg-content-type
/cm/access/current-config/apm/swg-scheme
/cm/access/current-config/apm/url-filter
/cm/access/current-config/cluster-health
/cm/access/current-config/cm-device-groups
/cm/access/current-config/ltm/pool
/cm/access/current-config/ltm/virtual
/cm/access/current-config/ltm/virtual/*/profiles
/cm/access/current-config/net/bwc/policy
/cm/access/current-config/net/bwc/priority-group
/cm/access/current-config/net/bwc/priority-group/*/priority-classes
/cm/access/current-config/net/self
/cm/access/current-config/sys/url-db/download-schedule
/cm/access/current-config/sys/url-db/url-category
/cm/adc-core/current-config/cluster-health
/cm/adc-core/current-config/cm-device-groups
/cm/adc-core/current-config/ltm/cipher/group
/cm/adc-core/current-config/ltm/classification/ce
/cm/adc-core/current-config/ltm/data-group/internal
/cm/adc-core/current-config/ltm/eviction-policy
/cm/adc-core/current-config/ltm/global-settings/connection
/cm/adc-core/current-config/ltm/message-routing/diameter/profile/router
/cm/adc-core/current-config/ltm/message-routing/diameter/profile/session
/cm/adc-core/current-config/ltm/message-routing/sip/profile/router
/cm/adc-core/current-config/ltm/message-routing/sip/profile/session
/cm/adc-core/current-config/ltm/monitor/diameter
/cm/adc-core/current-config/ltm/monitor/dns
/cm/adc-core/current-config/ltm/monitor/external
/cm/adc-core/current-config/ltm/monitor/firepass
/cm/adc-core/current-config/ltm/monitor/ftp
/cm/adc-core/current-config/ltm/monitor/gateway-icmp
/cm/adc-core/current-config/ltm/monitor/http
/cm/adc-core/current-config/ltm/monitor/https
/cm/adc-core/current-config/ltm/monitor/icmp
/cm/adc-core/current-config/ltm/monitor/imap
/cm/adc-core/current-config/ltm/monitor/inband
/cm/adc-core/current-config/ltm/monitor/ldap
/cm/adc-core/current-config/ltm/monitor/module-score
/cm/adc-core/current-config/ltm/monitor/mqtt
/cm/adc-core/current-config/ltm/monitor/mssql
/cm/adc-core/current-config/ltm/monitor/mysql
/cm/adc-core/current-config/ltm/monitor/nntp
/cm/adc-core/current-config/ltm/monitor/none
/cm/adc-core/current-config/ltm/monitor/oracle
/cm/adc-core/current-config/ltm/monitor/pop3
/cm/adc-core/current-config/ltm/monitor/postgresql
/cm/adc-core/current-config/ltm/monitor/radius
/cm/adc-core/current-config/ltm/monitor/radius-accounting
/cm/adc-core/current-config/ltm/monitor/real-server
/cm/adc-core/current-config/ltm/monitor/rpc
/cm/adc-core/current-config/ltm/monitor/sasp
/cm/adc-core/current-config/ltm/monitor/scripted
/cm/adc-core/current-config/ltm/monitor/sip
/cm/adc-core/current-config/ltm/monitor/smb
/cm/adc-core/current-config/ltm/monitor/smtp
/cm/adc-core/current-config/ltm/monitor/snmp-dca
/cm/adc-core/current-config/ltm/monitor/snmp-dca-base
/cm/adc-core/current-config/ltm/monitor/soap
/cm/adc-core/current-config/ltm/monitor/tcp
/cm/adc-core/current-config/ltm/monitor/tcp-echo
/cm/adc-core/current-config/ltm/monitor/tcp-half-open
/cm/adc-core/current-config/ltm/monitor/udp
/cm/adc-core/current-config/ltm/monitor/virtual-location
/cm/adc-core/current-config/ltm/monitor/wap
/cm/adc-core/current-config/ltm/monitor/wmi
/cm/adc-core/current-config/ltm/node
/cm/adc-core/current-config/ltm/persistence/cookie
/cm/adc-core/current-config/ltm/persistence/dest-addr
/cm/adc-core/current-config/ltm/persistence/hash
/cm/adc-core/current-config/ltm/persistence/msrdp
/cm/adc-core/current-config/ltm/persistence/sip
/cm/adc-core/current-config/ltm/persistence/source-addr
/cm/adc-core/current-config/ltm/persistence/ssl
/cm/adc-core/current-config/ltm/persistence/universal
/cm/adc-core/current-config/ltm/pool
/cm/adc-core/current-config/ltm/pool/*/members
/cm/adc-core/current-config/ltm/profile/analytics-http
/cm/adc-core/current-config/ltm/profile/analytics-http/*/traffic-capture
/cm/adc-core/current-config/ltm/profile/certificate-authority
/cm/adc-core/current-config/ltm/profile/classification
/cm/adc-core/current-config/ltm/profile/client-ldap
/cm/adc-core/current-config/ltm/profile/client-ssl
/cm/adc-core/current-config/ltm/profile/dhcpv4
/cm/adc-core/current-config/ltm/profile/dhcpv6
/cm/adc-core/current-config/ltm/profile/diameter
/cm/adc-core/current-config/ltm/profile/dns
/cm/adc-core/current-config/ltm/profile/dns-logging
/cm/adc-core/current-config/ltm/profile/fasthttp
/cm/adc-core/current-config/ltm/profile/fastl4
/cm/adc-core/current-config/ltm/profile/fix
/cm/adc-core/current-config/ltm/profile/ftp
/cm/adc-core/current-config/ltm/profile/gtp
/cm/adc-core/current-config/ltm/profile/html
/cm/adc-core/current-config/ltm/profile/http
/cm/adc-core/current-config/ltm/profile/http2
/cm/adc-core/current-config/ltm/profile/http-compression
/cm/adc-core/current-config/ltm/profile/icap
/cm/adc-core/current-config/ltm/profile/ipother
/cm/adc-core/current-config/ltm/profile/mblb
/cm/adc-core/current-config/ltm/profile/ntlm
/cm/adc-core/current-config/ltm/profile/ocsp-stapling-params
/cm/adc-core/current-config/ltm/profile/one-connect
/cm/adc-core/current-config/ltm/profile/pcp
/cm/adc-core/current-config/ltm/profile/pptp
/cm/adc-core/current-config/ltm/profile/qoe
/cm/adc-core/current-config/ltm/profile/radius
/cm/adc-core/current-config/ltm/profile/request-adapt
/cm/adc-core/current-config/ltm/profile/request-log
/cm/adc-core/current-config/ltm/profile/response-adapt
/cm/adc-core/current-config/ltm/profile/rewrite
/cm/adc-core/current-config/ltm/profile/rewrite/*/uri-rules
/cm/adc-core/current-config/ltm/profile/rtsp
/cm/adc-core/current-config/ltm/profile/sctp
/cm/adc-core/current-config/ltm/profile/server-ldap
/cm/adc-core/current-config/ltm/profile/server-ssl
/cm/adc-core/current-config/ltm/profile/sip
/cm/adc-core/current-config/ltm/profile/smtps
/cm/adc-core/current-config/ltm/profile/socks
/cm/adc-core/current-config/ltm/profile/statistics
/cm/adc-core/current-config/ltm/profile/stream
/cm/adc-core/current-config/ltm/profile/tcp
/cm/adc-core/current-config/ltm/profile/udp
/cm/adc-core/current-config/ltm/profile/web-acceleration
/cm/adc-core/current-config/ltm/profile/xml
/cm/adc-core/current-config/ltm/rule
/cm/adc-core/current-config/ltm/snatpool
/cm/adc-core/current-config/ltm/snat-translation
/cm/adc-core/current-config/ltm/virtual
/cm/adc-core/current-config/ltm/virtual/*/profiles
/cm/adc-core/current-config/ltm/virtual-address
/cm/adc-core/current-config/net/dns-resolver
/cm/adc-core/current-config/net/interface
/cm/adc-core/current-config/net/ip-address-lists
/cm/adc-core/current-config/net/ipsec/ike-daemon
/cm/adc-core/current-config/net/ipsec/ike-peer
/cm/adc-core/current-config/net/ipsec/ipsec-policy
/cm/adc-core/current-config/net/ipsec/manual-security-association
/cm/adc-core/current-config/net/ipsec/traffic-selector
/cm/adc-core/current-config/net/rate-shaping/class
/cm/adc-core/current-config/net/route
/cm/adc-core/current-config/net/route-domain
/cm/adc-core/current-config/net/self
/cm/adc-core/current-config/net/traffic-group
/cm/adc-core/current-config/net/tunnels/fec
/cm/adc-core/current-config/net/tunnels/ipip
/cm/adc-core/current-config/net/tunnels/tunnel
/cm/adc-core/current-config/net/vlan
/cm/adc-core/current-config/net/vlan/*/interfaces
/cm/adc-core/current-config/net/vlan-group
/cm/adc-core/current-config/stats-refresh
/cm/adc-core/current-config/sys/application-service
/cm/adc-core/current-config/sys/crypto/cert
/cm/adc-core/current-config/sys/crypto/key
/cm/adc-core/current-config/sys/file/ssl-cert
/cm/adc-core/current-config/sys/file/ssl-cert/*/bundle-certificates
/cm/adc-core/current-config/sys/file/ssl-crl
/cm/adc-core/current-config/sys/file/ssl-csr
/cm/adc-core/current-config/sys/file/ssl-key
/cm/adc-core/current-config/sys/folder
/cm/adc-core/current-config/sys/log-config/destination/alertd
/cm/adc-core/current-config/sys/log-config/destination/arcsight
/cm/adc-core/current-config/sys/log-config/destination/ipfix
/cm/adc-core/current-config/sys/log-config/destination/local-db
/cm/adc-core/current-config/sys/log-config/destination/local-syslog
/cm/adc-core/current-config/sys/log-config/destination/mgmt-port
/cm/adc-core/current-config/sys/log-config/destination/remote-hslog
/cm/adc-core/current-config/sys/log-config/destination/remote-syslog
/cm/adc-core/current-config/sys/log-config/destination/splunk
/cm/adc-core/current-config/sys/log-config/filter
/cm/adc-core/current-config/sys/log-config/publisher
/cm/adc-core/current-config/sys/smtp-server
/cm/asm/current-config/change-status
/cm/asm/current-config/data-protection
/cm/asm/current-config/http-methods
/cm/asm/current-config/policies
/cm/asm/current-config/policies/*/brute-force-attack-preventions
/cm/asm/current-config/policies/*/character-sets
/cm/asm/current-config/policies/*/cookies
/cm/asm/current-config/policies/*/csrf-protection
/cm/asm/current-config/policies/*/csrf-urls
/cm/asm/current-config/policies/*/data-guard
/cm/asm/current-config/policies/*/disallowed-geolocations
/cm/asm/current-config/policies/*/evasions
/cm/asm/current-config/policies/*/extractions
/cm/asm/current-config/policies/*/filetypes
/cm/asm/current-config/policies/*/gwt-profiles
/cm/asm/current-config/policies/*/headers
/cm/asm/current-config/policies/*/host-names
/cm/asm/current-config/policies/*/http-protocols
/cm/asm/current-config/policies/*/ip-intelligence
/cm/asm/current-config/policies/*/json-profiles
/cm/asm/current-config/policies/*/login-enforcement
/cm/asm/current-config/policies/*/login-pages
/cm/asm/current-config/policies/*/methods
/cm/asm/current-config/policies/*/parameters
/cm/asm/current-config/policies/*/plain-text-profiles
/cm/asm/current-config/policies/*/policy-builder
/cm/asm/current-config/policies/*/redirection-protection
/cm/asm/current-config/policies/*/response-pages
/cm/asm/current-config/policies/*/sections
/cm/asm/current-config/policies/*/sensitive-parameters
/cm/asm/current-config/policies/*/server-technologies
/cm/asm/current-config/policies/*/session-tracking
/cm/asm/current-config/policies/*/signatures
/cm/asm/current-config/policies/*/signature-sets
/cm/asm/current-config/policies/*/urls
/cm/asm/current-config/policies/*/violations
/cm/asm/current-config/policies/*/web-scraping
/cm/asm/current-config/policies/*/web-services-securities
/cm/asm/current-config/policies/*/websocket-urls
/cm/asm/current-config/policies/*/whitelist-ips
/cm/asm/current-config/policies/*/xml-profiles
/cm/asm/current-config/policies/*/xml-validation-files
/cm/asm/current-config/server-technologies
/cm/asm/current-config/signatures
/cm/asm/current-config/signature-sets
/cm/asm/current-config/violations
/cm/asm/current-config/virtual-servers
/cm/dns/current-config/certificate
/cm/dns/current-config/cluster-health
/cm/dns/current-config/cm-device-groups
/cm/dns/current-config/datacenter
/cm/dns/current-config/global-settings/general
/cm/dns/current-config/indicator-constant
/cm/dns/current-config/iquery-stats
/cm/dns/current-config/listener
/cm/dns/current-config/objects-stats
/cm/dns/current-config/objects-stats/refresh
/cm/dns/current-config/pool/a
/cm/dns/current-config/pool/a/*/members
/cm/dns/current-config/pool/aaaa
/cm/dns/current-config/pool/aaaa/*/members
/cm/dns/current-config/pool/cname
/cm/dns/current-config/pool/cname/*/members
/cm/dns/current-config/pool/mx
/cm/dns/current-config/pool/mx/*/members
/cm/dns/current-config/pool/naptr
/cm/dns/current-config/pool/naptr/*/members
/cm/dns/current-config/pool/srv
/cm/dns/current-config/pool/srv/*/members
/cm/dns/current-config/profile
/cm/dns/current-config/region
/cm/dns/current-config/rule
/cm/dns/current-config/server
/cm/dns/current-config/server/*/devices
/cm/dns/current-config/server/*/virtual-servers
/cm/dns/current-config/service-health
/cm/dns/current-config/sync-group
/cm/dns/current-config/sync-group-health
/cm/dns/current-config/sync-group-health-refresh
/cm/dns/current-config/sync-group-refresh
/cm/dns/current-config/sync-status
/cm/dns/current-config/topology
/cm/dns/current-config/wideip/a
/cm/dns/current-config/wideip/aaaa
/cm/dns/current-config/wideip/cname
/cm/dns/current-config/wideip/mx
/cm/dns/current-config/wideip/naptr
/cm/dns/current-config/wideip/srv
/cm/firewall/current-config/address-lists
/cm/firewall/current-config/destination-translations
/cm/firewall/current-config/device-contexts
/cm/firewall/current-config/firewall-compilation-stats
/cm/firewall/current-config/firewall-rule-stats
/cm/firewall/current-config/firewalls
/cm/firewall/current-config/firewalls/*/rules
/cm/firewall/current-config/fqdn-resolvers
/cm/firewall/current-config/nat-policies
/cm/firewall/current-config/nat-policies/*/rules
/cm/firewall/current-config/policies
/cm/firewall/current-config/policies/*/rules
/cm/firewall/current-config/port-lists
/cm/firewall/current-config/port-misuse-policies
/cm/firewall/current-config/rule-lists
/cm/firewall/current-config/rule-lists/*/rules
/cm/firewall/current-config/schedules
/cm/firewall/current-config/service-policies
/cm/firewall/current-config/service-timer-policies
/cm/firewall/current-config/source-translations
/cm/global/tasks/current-config-consistency-check
/cm/security-shared/current-config/anti-fraud-profiles
/cm/security-shared/current-config/blacklist-publisher/categories
/cm/security-shared/current-config/blacklist-publisher/profiles
/cm/security-shared/current-config/cluster-health
/cm/security-shared/current-config/cm-device-groups
/cm/security-shared/current-config/dos-bot-signature
/cm/security-shared/current-config/dos-bot-signature-category
/cm/security-shared/current-config/dos-device-config
/cm/security-shared/current-config/dos-device-metadata
/cm/security-shared/current-config/dos-network-whitelist
/cm/security-shared/current-config/dos-profile-application-metadata
/cm/security-shared/current-config/dos-profile-metadata
/cm/security-shared/current-config/dos-profile-network-metadata
/cm/security-shared/current-config/dos-profile-protocol-dns-metadata
/cm/security-shared/current-config/dos-profile-protocol-sip-metadata
/cm/security-shared/current-config/dos-profiles
/cm/security-shared/current-config/dos-profiles/*/application
/cm/security-shared/current-config/dos-profiles/*/dos-network
/cm/security-shared/current-config/dos-profiles/*/protocol-dns
/cm/security-shared/current-config/dos-profiles/*/protocol-sip
/cm/security-shared/current-config/ip-intelligence/blacklist-categories
/cm/security-shared/current-config/ip-intelligence/feed-lists
/cm/security-shared/current-config/ip-intelligence/global-policy
/cm/security-shared/current-config/ip-intelligence/policies
/cm/security-shared/current-config/ip-uncommon-protolists
/cm/security-shared/current-config/log-profiles
/cm/security-shared/current-config/log-profiles/*/application
/cm/security-shared/current-config/log-profiles/*/network
/cm/security-shared/current-config/log-profiles/*/protocol-dns
/cm/security-shared/current-config/log-profiles/*/protocol-sip
/cm/security-shared/current-config/provisioned-resources
/cm/security-shared/current-config/route-domains
/cm/security-shared/current-config/scrubber-profiles
/cm/security-shared/current-config/scrubber-profiles/*/scrubber-categories
/cm/security-shared/current-config/scrubber-profiles/*/scrubber-rt-domains
/cm/security-shared/current-config/scrubber-profiles/*/scrubber-virtual-servers
/cm/security-shared/current-config/security-dns-profiles
/cm/security-shared/current-config/security-http-profiles
/cm/security-shared/current-config/ssh-profiles
/cm/security-shared/current-config/ssh-profiles/*/auth-info
/cm/security-shared/current-config/ssh-profiles/*/rules
/cm/security-shared/current-config/udp-portlists
/cm/security-shared/current-config/virtuals
/cm/security-shared/current-config/virtuals/*/profiles
/cm/websafe/current-config/cluster-health
/cm/websafe/current-config/cm-device-groups
/cm/websafe/current-config/datasafe-profiles
/cm/websafe/current-config/datasafe-profiles/*/urls
/cm/websafe/current-config/device-variables
/cm/websafe/current-config/virtual-servers
/cm/websafe/current-config/virtual-servers/*/profiles

template-config (expanded list)

REST Endpoint Module Access Description
/mgmt/cm/<module>/template-config/* All config modules RW BIG-IQ’s template config objects
/cm/access/template-config/ltm/virtual
/cm/access/template-config/ltm/virtual/*/profiles
/cm/adc-core/template-config/ltm/monitor/http
/cm/adc-core/template-config/ltm/monitor/https
/cm/adc-core/template-config/ltm/monitor/tcp
/cm/adc-core/template-config/ltm/monitor/udp
/cm/adc-core/template-config/ltm/node
/cm/adc-core/template-config/ltm/persistence/cookie
/cm/adc-core/template-config/ltm/persistence/hash
/cm/adc-core/template-config/ltm/persistence/source-addr
/cm/adc-core/template-config/ltm/persistence/ssl
/cm/adc-core/template-config/ltm/persistence/universal
/cm/adc-core/template-config/ltm/pool
/cm/adc-core/template-config/ltm/pool/*/members
/cm/adc-core/template-config/ltm/profile/client-ssl
/cm/adc-core/template-config/ltm/profile/fastl4
/cm/adc-core/template-config/ltm/profile/http
/cm/adc-core/template-config/ltm/profile/tcp
/cm/adc-core/template-config/ltm/profile/udp
/cm/adc-core/template-config/ltm/rule
/cm/adc-core/template-config/ltm/snatpool
/cm/adc-core/template-config/ltm/snat-translation
/cm/adc-core/template-config/ltm/virtual
/cm/adc-core/template-config/ltm/virtual/*/profiles
/cm/adc-core/template-config/net/dns-resolver
/cm/adc-core/template-config/net/route
/cm/adc-core/template-config/net/route-domain
/cm/adc-core/template-config/net/self
/cm/adc-core/template-config/net/vlan
/cm/adc-core/template-config/net/vlan/*/interfaces
/cm/asm/template-config/virtual-servers
/cm/firewall/template-config/firewalls
/cm/firewall/template-config/firewalls/*/rules
/cm/security-shared/template-config/virtuals
/cm/security-shared/template-config/virtuals/*/profiles

reports (expanded list)

REST Endpoint Module Access Description
/mgmt/cm/<module>/reports/* All config modules RO Simple module-specific reports, Deployment tracker, Config Differences, Verification reports
/cm/access/reports/access-es-upgrade-task
/cm/access/reports/acl-groupby-count-task
/cm/access/reports/browser-os-stats-task
/cm/access/reports/config-differences
/cm/access/reports/config-differences/*/parts
/cm/access/reports/config-verifications
/cm/access/reports/deploy-tracker
/cm/access/reports/profile-access-groupby-session-count-task
/cm/access/reports/refresh-active-sessions
/cm/access/reports/remote-log-config
/cm/access/reports/saml-log-node-task-creator
/cm/access/reports/sessions-by-geo-location-task
/cm/access/reports/sessions-by-user-task
/cm/access/reports/session-summary-child-reindex-task
/cm/access/reports/session-summary-reindex-task-creator
/cm/access/reports/session-summmary-reindex-task
/cm/access/reports/session-variables
/cm/access/reports/tasks/oauth-token-creation-task
/cm/access/reports/tasks/oauth-update-sessions-task
/cm/access/reports/tasks/saml-error-log-creation-task
/cm/access/reports/view-remote-log-config
/cm/adc-core/reports/config-differences
/cm/adc-core/reports/config-differences/*/parts
/cm/adc-core/reports/config-verifications
/cm/adc-core/reports/deploy-tracker
/cm/asm/reports/config-differences
/cm/asm/reports/config-differences/*/parts
/cm/asm/reports/config-verifications
/cm/asm/reports/deploy-tracker
/cm/asm/reports/policy-signatures-difference-reference
/cm/asm/reports/policy-signatures-difference-reference/*/parts
/cm/device/assessment/reports
/cm/device/assessment/reports/*/chunks
/cm/device/ihealth/reports
/cm/device/reports/device-inventory
/cm/device/reports/device-inventory/*/*
/cm/device/reports/device-inventory/*/*/*
/cm/device/reports/device-inventory/*/results
/cm/device/reports/ucs-diff
/cm/device/reports/ucs-diff/*/files
/cm/dns/reports/config-differences
/cm/dns/reports/config-differences/*/parts
/cm/dns/reports/config-verifications
/cm/dns/reports/deploy-tracker
/cm/firewall/reports/change-reports
/cm/firewall/reports/change-reports/*/changes
/cm/firewall/reports/config-differences
/cm/firewall/reports/config-differences/*/parts
/cm/firewall/reports/config-verifications
/cm/firewall/reports/deploy-tracker
/cm/firewall/reports/object-count-reports
/cm/firewall/reports/stats-reports
/cm/security-shared/reports/config-differences
/cm/security-shared/reports/config-differences/*/parts
/cm/security-shared/reports/config-verifications
/cm/security-shared/reports/deploy-tracker
/cm/websafe/reports/config-differences
/cm/websafe/reports/config-differences/*/parts
/cm/websafe/reports/config-verifications
/cm/websafe/reports/deploy-tracker